-
Notifications
You must be signed in to change notification settings - Fork 1
Closed
Labels
documentationPull requests that update a documentationPull requests that update a documentationenhancementNew feature or requestNew feature or request
Description
Summary
c509 certificate updates to the latest RFC Draft (11)
Description
Update the C509 certificate to the latest RFC Draft 11
The current implementation is based on Draft 9.
Update the code to fit the Draft 11. https://datatracker.ietf.org/doc/draft-ietf-cose-cbor-encoded-cert/11/
Changes made from version 9 vs 11:
- OID PEN is removed
- Fix type time, should be unsigned integer
- Msg field version - the type can be a natively signed C509 certificate following X.509 v3 (c509CertificateType = 2) or a CBOR re-encoded X.509 v3 DER certificate (c509CertificateType = 3)
- issuer -> if issuer same as subject, issuer is set to null
- subject shouldn’t be null
- Relative distinguished name is removed
- Update documents
- New TBSCertificate
TBSCertificate = (
c509CertificateType: int,
certificateSerialNumber: CertificateSerialNumber,
issuerSignatureAlgorithm: AlgorithmIdentifier,
issuer: Name / null,
validityNotBefore: ~time,
validityNotAfter: ~time / null,
subject: Name,
subjectPublicKeyAlgorithm: AlgorithmIdentifier,
subjectPublicKey: any,
extensions: Extensions,
)
Metadata
Metadata
Assignees
Labels
documentationPull requests that update a documentationPull requests that update a documentationenhancementNew feature or requestNew feature or request
Type
Projects
Status
🔬 Ready For QA